Privacy Policy

We process a small amount of personal data, listed in full below, and nothing beyond it. In its default on-device mode the platform sends nothing about you anywhere. A few features — purchases, live voice, and running the website — necessarily involve limited data. Every one of them is in the table in section 2. We do not advertise to you, do not profile you, and do not sell or share your data.

This notice covers two different things: the HeyPlay platform (the iOS app and its companion) and this website (heyplayinteractive.com). They handle different data, and each section says which it applies to.

1Who we are

The platform and website are published by HeyPlay Interactive Private Limited ("we", "us"), incorporated in India, registered office No. 78/9, Outer Ring Road, Bellandur, Bangalore South, Bangalore 560103, Karnataka, India.

For the EU/UK GDPR we are the data controller; for India's Digital Personal Data Protection Act, 2023 we are the Data Fiduciary. We have not appointed an EU/UK Article 27 representative; if that changes, the details will appear here. Our India Grievance Officer and contact details are in section 12.

2The data we process

This is the complete list. Everything we process about you is one of these; anything not here, we do not process.

We do not write "we collect no personal data", because it would not be true: a hashed identifier and a purchase record are personal data. What is true is the line at the top — we process the small set above, and nothing beyond it.

3What we deliberately do not process

Each of these is unusual enough to be worth stating, and each is checkable:

• Your conversations are not stored on our servers — live-voice audio is processed in the moment to produce a reply and is not retained by us. What the speech provider does with it while the session is running is set out in section 2.
• No behavioural-analytics identifiers, no cross-session profiling, and no advertising identifier (IDFA).
• No advertising shown to you, no ad networks, and no data sold or shared for advertising.
• No location beyond what an IP address unavoidably reveals in transit; we do not retain it to locate you.
• No name, no email in the app, no contacts, photos, calendar, health data, or files.

4How each feature handles your data

Default, on-device mode

By default the companion runs entirely on your device and sends nothing about you anywhere. Progress, settings, and the companion's on-device memory are stored in the app's protected container and are removed when you remove HeyPlay from your device. Whether the companion keeps a local memory of you is your choice — allow it for a more personal companion, or decline and that component is not carried.

Choosing music by voice

To pick music by speaking, the app uses Apple's on-device speech recognition. That audio and its transcript stay on your device and are not sent to Apple's servers or ours.

Live voice — "talk time"

Live voice conversation with the companion is a paid, optional feature (this is what talk time is spent on), available for age ranges 18 and over. While a live-voice session is active, your speech audio is sent, over an encrypted connection, to a third-party speech provider (Google LLC, Gemini API) to turn it into the companion's reply. We do not retain that audio; the provider's own retention is stated in sections 2 and 7. This is the one place your voice leaves the device, and the app does not open a live session for an age range below 18, or without you starting a paid live session.

Cloud mode & immersion

Talk time is what powers the fullest companion experiences — Concerts, Dream Simulations, and richer Conversations — designed so the companion can genuinely be with you in the moment: beside you at a concert, along for a hover drive, or in an unhurried conversation that feels real. It is entirely your choice; if you'd rather not use it, simply don't buy talk time, and the private on-device mode remains free.

Purchases

Purchases are handled by Apple through the App Store; we never see your card, billing address or Apple Account details. Completing and restoring a purchase involves a device/vendor identifier through Apple's StoreKit, and the hashed device-scoped identifier in the table, used only to deliver and restore what you paid for — never to track, profile or advertise to you. Talk time is a consumable and is not restorable; World packs are restorable through Apple.

Downloaded content

Some music and world content downloads after installation via Apple's Background Assets service, hosted by Apple. Apple, not we, sees that a download happened.

Camera & AR

An optional AR mode uses your device camera, processed live and only on your device to render the view. Nothing is recorded, saved, or transmitted; AR is off by default and you can decline camera access.

Reporting

If you use "Report something", the app records the reason you select so it can be acted on. No transcript, conversation, recording or personal data is attached, and reporting does not profile you.

5This website (heyplayinteractive.com)

The website processes different data from the app. If you use the "Shape the product" early-access form, we hold the email address you type and the three answers you tap — stored in Google Firebase (Cloud Firestore), our processor, readable only by us. Submitting is optional; our basis is your consent. To have your submission corrected or deleted, email us (section 12). The site also keeps standard server logs (table, section 2) and loads fonts from Google Fonts, which means Google receives your IP address when a page loads. There is no advertising, no third-party analytics, and no tracking cookies on this site.

6Age and children

HeyPlay is a 13+ platform. Your age is established from an age range supplied by Apple’s Declared Age Range service — never a birthday, never a name, and never a figure you type in yourself, because a self-declared age is not an age assurance mechanism. The range is resolved on your device, stored there as a small number of true/false values, and re-checked periodically so that a band does not follow you after you have grown out of it.

Apple answers against three gates — 13, 16 and 18 — so four ranges are possible, and all three answers are stored on your device as true/false values. In this version two lines are acted on. The 16 answer is resolved and held because some countries set their rules at 16 and we would rather already have the answer than ask you again later; it does not currently change what you can do.

The two lines that are acted on:

• Under 13 — the app does not run. This is a hard block, not a reduced mode.
• Under 18 — nothing leaves your device. Live voice, cloud-assisted conversation and purchases each require a range of 18 or over. 13–15 and 16–17 have exactly the same access in this version: the full app, in its free on-device mode.

If Apple returns no range, or you decline to share one, the app stays open and the cloud features stay closed. We treat anyone not shown to be an adult as a minor.

The consequence is worth stating plainly: a user below 18 uses HeyPlay entirely on their own device, and we receive nothing about them at all — no audio, no conversation, no purchase record, no identifier. That is why this policy can describe so little data: for a large part of our audience there is none.

Country-by-country control. Which features are available in a given App Store storefront — and the minimum age attached to them — is set centrally by us and applied by our own servers before any cloud session opens. A country can be made stricter than the rules above. It cannot be made looser: the 18 minimum for anything that transmits is a floor in that system, not a default. See our Age & Child Safety page for the full detail. If we identify that someone under 13 has provided information through the website form, we delete it.

How the age range is stored — the detail

To decide which features are available, the app asks Apple for the age range of the Apple Account in use. Apple returns a range, such as "18 or over" — never a date of birth, and never a name. The result is stored on your device as a small number of true/false values. It is not sent to us, is not part of any account, and is not shared with anyone. If you decline to share a range, that choice is also stored only on your device.

7Legal bases and international transfers

Legal bases. Purchases and delivering paid features: performance of our contract with you. Website form: your consent. Any diagnostics: our legitimate interest in fixing faults (or your consent where required).

International transfers. Live-voice audio is sent to a third-party speech provider (Google LLC, United States) to generate the reply; this may involve a transfer outside your country, made under the European Commission's Standard Contractual Clauses, as incorporated in Google's API data-processing terms. Google logs that audio and text for a limited period solely to detect and prevent abuse of its service, and does not use it to develop or improve Google products. Website data is processed by Google (Firebase). Where data crosses a border, we rely on the appropriate legal transfer mechanism for that route.

8Your rights, and how to use them

You have rights to access, correct, delete, port, and object to the processing of your personal data, and to withdraw consent. Because we process so little, in practice this concerns your purchase records, the hashed balance identifier, and — if you used it — your website form submission. To exercise any of these, email customer@heyplayinteractive.com; we aim to respond within 30 days, sooner where the law requires.

Complaints. You may complain to your local data-protection authority. In India, you may approach the Data Protection Board of India.

9The AI companion

The companion is an AI system and its dialogue is generated; it identifies itself as AI at first use and periodically. No decision producing a legal or similarly significant effect about you is made automatically.

10Security, breaches, and changes

On the device, data sits in the app's protected container under iOS file-level protection; because the default mode transmits nothing, there is no server-side store of it to breach. Where data does travel (live voice, purchases, the website form), it is protected in transit by encryption and access is limited to us and the named processors. If a breach affects your personal data, we notify the people affected and the relevant authority as the law requires.

If we change this policy — or introduce anything that changes how your data is handled — we update this page and its date first, and tell our virtual-citizens inside the platform (through platform messaging and your companion, Glitchy) before it takes effect. We will never change how your data is handled quietly.

11Building HeyPlay with its virtual-citizens

We call the people who use HeyPlay virtual-citizens — simply our word for the players who inhabit these virtual worlds. It carries no political, national or legal meaning. HeyPlay is a calm, private space, and the experience is about presence and creation. We do not endorse or design for bias arising from human differences, and where any surfaces we treat it as a fault to fix. Increasingly, the players are the creators: a creator layer is taking shape so artists, DJs, musicians, teachers and everyday players can build the dreams they want to see — deliberately, with safeguards to keep creation healthy as it grows. HeyPlay Interactive is only the seed; the tree is grown by its virtual-citizens. As these capabilities arrive, we will update this policy and notify you first, as above.

12Contact

Privacy questions, requests and complaints: customer@heyplayinteractive.com

Grievance Officer / Data Protection contact (India, DPDPA):
The Grievance Officer, HeyPlay Interactive Private Limited
No. 78/9, Outer Ring Road, Bellandur, Bangalore South, Bangalore 560103, Karnataka, India
customer@heyplayinteractive.com